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302 class Hashtable$Contract extends Hashtable 

304 constraint 300 

306 let indices = {0.. keys. Length - 1} [O* 

308 keys != null and values != null and 

310 keys.Length = values.Length and 

312 (forall i in indices holds keys[i ] != null ) and 

314 (forall i , j in indices holds keys[i ] = keysO ]=>!=]) 

318 Object set (Object key, Object value) 

319 ensure 

320 (key = null and thrown is ArgumentNullException) or 
322 (exists i in {0.. keys'. Length - 1} holds keys[i ]' = key and 
324 valuesp ]' = value and 

326 result = value) 
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402 class Hashtable$Checked : IDictionary { 

404 void Hashtable$lnvariant() { 

405 ASSERT([[constraint clause from Fig. 3]]); 

406 } 

407 void set$Pre (Object key, Object val) { ASSERT(true); } 

408 void set$Post (Object key, Object value, Object result) { 
41 0 ASSERT([[ensure clause from Fig. 3]]); 

412 } 

414 Object[ ] keys; Object[ ] values; 

418 Object set (Object key, Object value) { 

420 Object result ; 

422 Hashtable$lnvariant(); 

424 set$Pre(key, value); 

426 try { 

428 [[body of the set method from the implementation code]] 

432 <return value / result = value; break END;> 

434 } catch (Exception e) { 

436 result = e; 

438 } 

440 END : 

444 Hashtable$lnvariant(); 
446 set$Post(key, value, result ); 

448 if (result is Exception) throw result ; else return result ; 

450 }} 
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502 class IDictionary$Contract implements I Dictionary 

504 var map as Map of Object to Object 

506 constraint null notin domain(map) 

510 Object set (Object key, Object value) 

511 ensure 

512 (key = null and thrown is ArgumentNull Exception) or 
514 (map(key)' = value and result = value) 
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604 Hashtable::abstraction () as IDictionary$Contract { 
606 return new IDictionary$Contract( 

608 {keys(i) |-> values(i) | i in {C.keys.Length - 1} where keys(i) != null} ); } 
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702 class IDictionary$Contract implements Dictionary 

704 var map as Map of Object to Object 

706 var enums as Set of Enumerator 

708 constraint null notin domain(map) and null notin enums 

712 Object set (Object key, Object value) 

714 step if key = null 

716 throw new ArgumentNullException() 

718 map(key) := value 

720 step forall e in enums 

722 e.lnvalidate() 

724 step return map(key) 
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800 

802 class IDictionary$Contract { \\ 
804 AsmL.Map map = new Asml_.Map(); ^ 
806 AsmL.Set enums = new AsmL.Set(); 
808 void set$Pre (Object key, Object val) { ASSERT(true); } 
810 void set$Post (Object key, Object val, Object result) { 
812 try { 

814 [[body of the specification of the the set method of Fig. 7]] 

815 <return e / ASSERT(result == e); return; > 

816 } catch (Exception e) { 

818 ASSERT(result.GetType() == e.GetTypeQ);} } } 



FIG. 8 



Inventors: Barnett & Schulte 
Express Mail No.: EV020740947US / Date of Deposit: February 20, 2002 
Title: COMFORMANCE EXECUTION OF NON-DETERMINISTIC 
SPECIFICATIONS FOR COMPONENTS 
Attorney's Matter No.: 3382-61 109/SAW 
Page 8 of 16 



902 class Hashtable$Checked : I Dictionary { 

904 IDictionary$Contract contract = new IDictionary$Contract(); 

906 ObjectQ keys; Object valuesQ; 

908 Object set(Object key, Object value) { 

910 Object result; 

912 contract.lnvariant(); 

914 contract.set$Pre(key .value); 

916 try { 

9 1 8 [[body of the set method from the implementation code]] 
920 <return e / result = e; break END; > ^7 
922 } catch (Exception ex) { result = ex;} L\ 
924 END: ^ 
926 contract.set$Post(key,value,result); 900 

928 contract.lnvariant(); 

930 if ( result is Exception ) throw result; else return result; } } 
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1 002 class Hashtable$Checked : I Dictionary { \£ 
1004 I Dictionary$Contract contract; 
1 006 IDictionary$Contract initialization() { . . . } 

1008 Hashtable(. . .) { 

1009 //initialize implementation variables here... 

1010 contract = initialization); }} 
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1 1 02 set (Object key, Object value) 



1104 if key = null 

1 1 06 throw ArgumentNullException 

1 1 08 map(key) := value 

1110 if key in domain(map) 

1112 choose r in { map(key), value } 

1114 return r 

1115 ifnone 

1116 throw new RuntimeException() 
1116 else 

1118 return value 

1100 
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1202 class IDictionary$Contract { 

1204 AsmL.Map map = new AsmL.Map(); 

1 206 AsmL.Set enums = new AsmL.Set(); 

1208 IDictionary$Contract$Set setlnstance; 

1210 void set$Pre(Object key, Object value) { 

1212 setlnstance = new IDictionary$Contract$Set(key,value); 

1214 ASSERT(true); 

1216 setlnstance.Step(); } 

1 220 void set$Post(Object key, Object value, Object result) { 

1 222 setlnstance. impl_result = result; 

1224 ASSERT(true); 

1226 setlnstance.pc = END; 

1228 setlnstance. Step(); } 
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1232 class IDictionary$Contract$Set : ISteppable, IDictionary$Contract { 

1234 Object key; 

1236 Object value; 

1238 Object result; 

1240 Object impljresult; 

D 1242 intpc; 

1244 void Step(); 

1 246 IDictionary$Contract$Set(Object k, Object v) { 
1 248 key = k; value = v; pc = 0; } 
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1250 void IDictionary$Contract$Set::Step() { 
1252 while (true) { 

1254 switch (pc){ 

1256 case 0: Stack. Push(new EmptyFrameO); pc += 1 ; break; 

1258 case 1: try { 

1260 if (key == null ) 

1 262 throw new ArgumentNullException(); 

U 1264 map(key) = value; 

O 1266 if ( Stack.NoOfCalls() > 0 ) { 

P 1268 pc+= 1; return;} 

W 1270 pc += 3; break; 

1272 } catch (Exception ex) { 

H 1274 result = ex; pc = END; return; } 

!« 1 276 case 2: ASSERT([[constraint from Figure 7]] && true);pc += 1 ; return; 

1 278 case 3: if (Stack.NoOfCalls() > 0) { pc -= 1 ; return; } 

C3 1280 pc+=1; break; 
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1282 case 4: try { 
1 286 foreach(IEnumerator e; enums) 

1288 Stack.Add(new Call(this,e,lnvalidate,null)) 




1 292 case 5: ASSERT([[constraint from Figure 7]] && map(key) == value); 
1294 pc += 1 ; return; 



^ 1290 [[repeat lines 1266-1274]] 

w 

1 296 case 6: [[repeat lines 1 278-1 280]] 

ffi 

. 

3 
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1 298 case 7: try { result = map(key); 

1 300 if ( Stack. NoOfCalls() > 0 ) {pc += 1 ; return; } 

1302 pc = END; return; 

1 304 } catch (Exception ex) { 

1 306 result = ex; pc = END; return; } 

1308 case 8: 

1 31 0 ASSERT([[constraint from Figure 7]] && map(key) == value); 

1312 pc += 1 ; return; 

1314 case 9: if (Stack. NoOfCalls() > 0) {pc -= 1 ; return; } 

1316 pc = END; return; 

1318 case END: 

1 320 ASSERT(Stack.NoOfCalls() == 0); 

1 322 ASSERT(result is Exception ? 

1 324 result.GetType() == impl_result.GetType() : 

1 326 result == impljresult); 

1328 Stack. Pop(); 

1330 return; } }} 
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1350 lnvalidate() { 

1352 Object result; 

1 354 Call c = Stack.SelectCall(this, "Invalidate", null); 

1356 if (c != null) c.Caller.Step(); 

1 358 try { valid := false } catch (Exception ex) { result = ex 

1 362 if (c != null) { Stack.Remove(c); c.Caller.Step(); } 

1 364 if ( result is Exception ) throw result; else return; } 



FIG. 17 



Inventors: Barnett & Schulte 
Express Mail No.: EV020740947US / Date of Deposit: February 20, 2002 
Title: COMFORMANCE EXECUTION OF NON-DETERMINISTIC 
SPECIFICATIONS FOR COMPONENTS 
Attorney's Matter No.: 3382-6 1109/S AW 
Page 16 of 16 



1400 



L 



1402 




Removable storage 



Non-removable 
storage 



Output device(s) 



Input device(s) 

Communication 
connection(s) \p 



FIG. 18 



